
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/68EB3B00F18E11E997528762C4F9AE02.roa
File: 68EB3B00F18E11E997528762C4F9AE02.roa (raw, json)
Hash identifier: UDW+dsOCznAjSoGbOEEbQ9JmE9TBtIe+eSGscHflZ+k=
Subject key identifier: 64:A9:4B:A2:D7:60:4C:46:BF:CA:C1:B7:19:3D:30:34:40:48:76:4D
Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379
Certificate serial: 0D41
Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/68EB3B00F18E11E997528762C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:39:39 +0000
ROA not before: Wed 14 Jan 2026 18:15:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133854
IP address blocks: 27.54.148.0/22 maxlen: 22
27.54.148.0/24 maxlen: 24
27.54.149.0/24 maxlen: 24
27.54.150.0/24 maxlen: 24
27.54.151.0/24 maxlen: 24
103.204.84.0/22 maxlen: 22
103.204.84.0/24 maxlen: 24
103.204.85.0/24 maxlen: 24
103.204.86.0/24 maxlen: 24
103.204.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl
rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3393 (0xd41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379
Validity
Not Before: Jan 14 18:15:34 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44fab-d24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:50:05:b7:f4:5a:9d:0e:21:51:9a:b9:09:2b:
d0:bf:53:45:1e:2f:85:eb:bc:e4:4b:28:dd:e2:01:
71:82:ab:b5:cd:32:35:2c:05:21:0f:50:d4:f1:fa:
36:b5:a8:9d:76:ee:23:01:8f:c3:56:c3:3d:b8:90:
4c:5f:2e:93:99:0b:86:dd:d7:01:8e:7d:8e:80:3e:
a1:ac:c2:6a:4a:9a:4a:1a:53:6b:16:0d:38:c0:9f:
c1:f4:8f:a9:0f:6c:0a:a0:4c:df:e4:27:37:cc:c3:
7d:3e:bb:80:1c:55:3b:bf:e2:b2:0b:c4:27:9c:04:
31:5c:a7:f9:30:f0:a7:7f:68:c6:52:0f:4f:f3:d5:
d9:a7:7c:38:f1:ef:f0:d0:cd:bb:7b:93:2e:05:cb:
87:77:17:eb:23:f1:d7:a2:9a:d9:fc:2f:ec:70:45:
c9:53:13:fe:05:ae:04:fc:42:4f:57:eb:46:dd:08:
01:b5:45:3b:65:0a:3a:9b:54:6c:c5:f5:d1:6e:59:
a1:5d:4a:2f:ec:fc:8f:0a:32:c1:fd:a5:c7:8a:b6:
1a:83:bb:6f:32:af:e3:97:75:0c:99:82:aa:09:21:
3c:a1:a2:80:95:f0:c0:6a:6d:2b:8d:01:b1:1d:5c:
28:40:b4:35:3a:86:eb:4b:9b:eb:38:80:8a:56:27:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A9:4B:A2:D7:60:4C:46:BF:CA:C1:B7:19:3D:30:34:40:48:76:4D
X509v3 Authority Key Identifier:
keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/68EB3B00F18E11E997528762C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.54.148.0/22
103.204.84.0/22
Signature Algorithm: sha256WithRSAEncryption
78:84:a0:56:95:c9:3e:5e:56:4f:e5:64:26:7d:96:8d:94:fc:
cc:69:5d:39:1c:e7:c8:a1:c7:9e:27:a1:11:6b:54:64:7a:4f:
14:f2:c0:f2:67:2a:d3:d8:33:3f:79:50:1d:25:d5:13:e6:85:
0c:2d:07:59:09:e4:58:6e:45:7d:f6:70:fc:a5:7a:52:7f:a0:
93:03:bc:a1:7b:0e:82:0d:e3:39:c3:f6:3a:5d:af:34:19:f6:
ab:4d:7d:c5:84:b8:e1:a8:9c:37:d2:a1:1d:0b:6f:82:a3:fe:
63:83:8b:86:d1:88:63:c5:6b:d7:05:52:24:ba:40:21:77:c0:
b4:70:ac:a7:86:ea:f7:86:bf:a7:85:83:12:1d:46:82:ec:73:
f2:6a:df:24:8e:5e:81:4f:f6:e2:b7:f0:19:3e:61:10:84:37:
4f:d2:cc:7b:f9:bf:11:2a:4a:6e:7a:7d:14:a4:f5:68:dd:42:
47:23:12:78:0b:e7:22:15:0c:52:e6:82:f6:e5:7d:cd:ca:08:
67:96:08:36:d7:ee:1c:db:33:b3:e0:63:d7:16:9b:23:0a:11:
11:15:4e:94:8c:f6:c4:06:bc:67:90:5a:04:a3:1c:6d:12:cf:
f4:54:fc:aa:07:ad:83:0f:6d:5e:98:9c:43:79:56:22:6f:91:
e4:2e:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:53 2026 by rpki-client